A buffer overflow vulnerability (CVE-2026-26740, CVSS 8.2 HIGH) in the giflib library allows for denial of service attacks via a flaw in the EGifGCBToExtension function. The NVD data indicates giflib version 5.2.2 is affected, though the Red Hat advisory does not specify a fixed version number within the article text. The update applies to Red Hat Enterprise Linux 10 and its associated architectures and support streams.
Red Hat Product Errata RHSA-2026:33502 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33502 - Security Advisory Overview Updated Packages Synopsis Important: giflib security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for giflib is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description giflib is a library for reading and writing gif images. Security Fix(es): giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVEs CVE-2026-26740 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce x86_64 giflib-5.2.1-25.el10_2.x86_64.rpm SHA-256: 688de809f797d3c9ad0df2b0db339b8c7824e159bc23bbd5fe2d059d6be4d7f8 giflib-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: e118897f266f13f3fb0d09c2138256450ca69de7174ac2aae149d33732c970f7 giflib-debugsource-5.2.1-25.el10_2.x86_64.rpm SHA-256: 6a84032c9cad2d7f4009a4fe1c5b68b5e9162e7bb5d872a0b8b696e2d827d497 giflib-utils-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: 90aa14ee7a9dea382ebda4bfc6dde8cfa4bb8b0d5801b7fb6d019a22e45e56f0 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce x86_64 giflib-5.2.1-25.el10_2.x86_64.rpm SHA-256: 688de809f797d3c9ad0df2b0db339b8c7824e159bc23bbd5fe2d059d6be4d7f8 giflib-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: e118897f266f13f3fb0d09c2138256450ca69de7174ac2aae149d33732c970f7 giflib-debugsource-5.2.1-25.el10_2.x86_64.rpm SHA-256: 6a84032c9cad2d7f4009a4fe1c5b68b5e9162e7bb5d872a0b8b696e2d827d497 giflib-utils-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: 90aa14ee7a9dea382ebda4bfc6dde8cfa4bb8b0d5801b7fb6d019a22e45e56f0 Red Hat Enterprise Linux for IBM z Systems 10 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce s390x giflib-5.2.1-25.el10_2.s390x.rpm SHA-256: 0bbdcc2a9f21c9c61ba6e678961716e601a0924027633327032ffd455496ca7e giflib-debuginfo-5.2.1-25.el10_2.s390x.rpm SHA-256: 4fc4baaf7fbe7a9d0543d398aa4472bf31cd663ab3714723bcea8a35c5aa6238 giflib-debugsource-5.2.1-25.el10_2.s390x.rpm SHA-256: 879b95edbe7417c17f937e38829ef2b495bfe161a87dbc12ff7f640e2e84400a giflib-utils-debuginfo-5.2.1-25.el10_2.s390x.rpm SHA-256: 5d24044a67c93ab51af3b15a64c5b891b43260998b4c4d60a5453dcb166b7133 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce s390x giflib-5.2.1-25.el10_2.s390x.rpm SHA-256: 0bbdcc2a9f21c9c61ba6e678961716e601a0924027633327032ffd455496ca7e giflib-debuginfo-5.2.1-25.el10_2.s390x.rpm SHA-256: 4fc4baaf7fbe7a9d0543d398aa4472bf31cd663ab3714723bcea8a35c5aa6238 giflib-debugsource-5.2.1-25.el10_2.s390x.rpm SHA-256: 879b95edbe7417c17f937e38829ef2b495bfe161a87dbc12ff7f640e2e84400a giflib-utils-debuginfo-5.2.1-25.el10_2.s390x.rpm SHA-256: 5d24044a67c93ab51af3b15a64c5b891b43260998b4c4d60a5453dcb166b7133 Red Hat Enterprise Linux for Power, little endian 10 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce ppc64le giflib-5.2.1-25.el10_2.ppc64le.rpm SHA-256: f5c36de5fae3e919b9dad47899b8b740d2225d5395ed20d92f1ec02c1a4252ee giflib-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 203e05e03d64d746f0c5c0581f02b1a9a92cfccb815080229526e1e206af3746 giflib-debugsource-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 4e36ad3c004493efdc6183d30fbc9413d079c02c674cae4240fe33634bad3848 giflib-utils-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 41134fdeecc8970a717b82cecd9023b94e5f7707ef5ccfdf77044ba5ccf95d3c Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce ppc64le giflib-5.2.1-25.el10_2.ppc64le.rpm SHA-256: f5c36de5fae3e919b9dad47899b8b740d2225d5395ed20d92f1ec02c1a4252ee giflib-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 203e05e03d64d746f0c5c0581f02b1a9a92cfccb815080229526e1e206af3746 giflib-debugsource-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 4e36ad3c004493efdc6183d30fbc9413d079c02c674cae4240fe33634bad3848 giflib-utils-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 41134fdeecc8970a717b82cecd9023b94e5f7707ef5ccfdf77044ba5ccf95d3c Red Hat Enterprise Linux for ARM 64 10 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce aarch64 giflib-5.2.1-25.el10_2.aarch64.rpm SHA-256: a381317fe7eed274708b21107a8fa2b7ccf3bb1c53b780a0308784c18d19139a giflib-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: 22d40b89c5e499a60b500dba7d4d4a6762d4546d3fc1a24736616077b7bfcf29 giflib-debugsource-5.2.1-25.el10_2.aarch64.rpm SHA-256: 6e576a0eb47fb118a4713147ff8aa08ffb33c390534f76614a00d11e5a7d8a95 giflib-utils-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: 938673d01990b0e2fe67daeeb88a0e296e3a5a0d9307f285bc16bf94c6d399c0 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM giflib-5.2.1-25.el10_2.src.rpm SHA-256: e228b0994d0ead45f13c73e173737cb92789e9130da34b02664c704ce927fbce aarch64 giflib-5.2.1-25.el10_2.aarch64.rpm SHA-256: a381317fe7eed274708b21107a8fa2b7ccf3bb1c53b780a0308784c18d19139a giflib-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: 22d40b89c5e499a60b500dba7d4d4a6762d4546d3fc1a24736616077b7bfcf29 giflib-debugsource-5.2.1-25.el10_2.aarch64.rpm SHA-256: 6e576a0eb47fb118a4713147ff8aa08ffb33c390534f76614a00d11e5a7d8a95 giflib-utils-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: 938673d01990b0e2fe67daeeb88a0e296e3a5a0d9307f285bc16bf94c6d399c0 Red Hat CodeReady Linux Builder for x86_64 10 SRPM x86_64 giflib-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: e118897f266f13f3fb0d09c2138256450ca69de7174ac2aae149d33732c970f7 giflib-debugsource-5.2.1-25.el10_2.x86_64.rpm SHA-256: 6a84032c9cad2d7f4009a4fe1c5b68b5e9162e7bb5d872a0b8b696e2d827d497 giflib-devel-5.2.1-25.el10_2.x86_64.rpm SHA-256: 64169cc32b9bfd2d1480fa9b509caf87306fd37f1a9d67cf485f339542415752 giflib-utils-debuginfo-5.2.1-25.el10_2.x86_64.rpm SHA-256: 90aa14ee7a9dea382ebda4bfc6dde8cfa4bb8b0d5801b7fb6d019a22e45e56f0 Red Hat CodeReady Linux Builder for Power, little endian 10 SRPM ppc64le giflib-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 203e05e03d64d746f0c5c0581f02b1a9a92cfccb815080229526e1e206af3746 giflib-debugsource-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 4e36ad3c004493efdc6183d30fbc9413d079c02c674cae4240fe33634bad3848 giflib-devel-5.2.1-25.el10_2.ppc64le.rpm SHA-256: fe32a142aca0f8199bf8ec00e96c871d9b70370bbec5eb1dc7f8ae3550c17185 giflib-utils-debuginfo-5.2.1-25.el10_2.ppc64le.rpm SHA-256: 41134fdeecc8970a717b82cecd9023b94e5f7707ef5ccfdf77044ba5ccf95d3c Red Hat CodeReady Linux Builder for ARM 64 10 SRPM aarch64 giflib-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: 22d40b89c5e499a60b500dba7d4d4a6762d4546d3fc1a24736616077b7bfcf29 giflib-debugsource-5.2.1-25.el10_2.aarch64.rpm SHA-256: 6e576a0eb47fb118a4713147ff8aa08ffb33c390534f76614a00d11e5a7d8a95 giflib-devel-5.2.1-25.el10_2.aarch64.rpm SHA-256: 6ddc00a7687777b8d4530b2997faef68183eb329d68803914ebaa355887d1188 giflib-utils-debuginfo-5.2.1-25.el10_2.aarch64.rpm SHA-256: